Excel Out of Bounds Array Indexing Vulnerability (CVE-2011-1987)

  Severity: CRITICAL
  CVE Identifier: CVE-2011-1987,MS11-072
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004793
  Trend Micro Deep Security DPI Rule Name: 1004793 - Excel Out Of Bounds Array Indexing Vulnerability (CVE-2011-1987)

  AFFECTED SOFTWARE AND VERSION

  • microsoft excel 2003
  • microsoft excel 2007
  • microsoft excel 2010
  • microsoft excel_viewer
  • microsoft office 2004
  • microsoft office 2007
  • microsoft office 2008
  • microsoft office 2010
  • microsoft office 2011
  • microsoft office_compatibility_pack 2007
  • microsoft open_xml_file_format_converter